{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,28]],"date-time":"2025-09-28T20:43:19Z","timestamp":1759092199264,"version":"3.37.3"},"reference-count":20,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"6","license":[{"start":{"date-parts":[[2018,11,1]],"date-time":"2018-11-01T00:00:00Z","timestamp":1541030400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2018,11,1]],"date-time":"2018-11-01T00:00:00Z","timestamp":1541030400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2018,11,1]],"date-time":"2018-11-01T00:00:00Z","timestamp":1541030400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Air Force Research Laboratory AFRL","award":["FA8750-17-C-0002"],"award-info":[{"award-number":["FA8750-17-C-0002"]}]},{"name":"U.S. Government"},{"DOI":"10.13039\/100006369","name":"George Mason University","doi-asserted-by":"crossref","id":[{"id":"10.13039\/100006369","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Comput. Sci. Eng."],"published-print":{"date-parts":[[2018,11,1]]},"DOI":"10.1109\/mcse.2018.2873854","type":"journal-article","created":{"date-parts":[[2018,10,15]],"date-time":"2018-10-15T18:21:07Z","timestamp":1539627667000},"page":"54-65","source":"Crossref","is-referenced-by-count":4,"title":["Evidence-Based Detection of Advanced Persistent Threats"],"prefix":"10.1109","volume":"20","author":[{"given":"Gheorghe","family":"Tecuci","sequence":"first","affiliation":[{"name":"George Mason University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dorin","family":"Marcu","sequence":"additional","affiliation":[{"name":"George Mason University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Steven","family":"Meckl","sequence":"additional","affiliation":[{"name":"George Mason University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mihai","family":"Boicu","sequence":"additional","affiliation":[{"name":"George Mason University"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"journal-title":"Evidential Foundations of Probabilistic Reasoning","year":"2001","author":"schum","key":"ref10"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/S0165-0114(83)80081-5"},{"key":"ref12","article-title":"Developing an Ontology of the Cyber Security Domain","author":"obrst","year":"0","journal-title":"7th International Conf on Semantic Technologies for Intelligence Defense and Security"},{"journal-title":"Semantic Web for the Working Ontologist Effective Modeling in RDFS and OWL","year":"2011","author":"allemang","key":"ref13"},{"year":"2004","key":"ref14"},{"journal-title":"Machine Learning and Knowledge Acquisition Integrated Approaches","year":"1995","author":"tecuci","key":"ref15"},{"journal-title":"Building intelligent agents An apprenticeship multistrategy learning theory methodology tool and case studies","year":"1998","author":"tecuci","key":"ref16"},{"key":"ref17","article-title":"Disciple-COA: From Agent Programming to Agent Teaching","author":"boicu","year":"0","journal-title":"Proc 27th Int Conf Machine Learning"},{"key":"ref18","first-page":"853","article-title":"Development and Deployment of a Disciple Agent for Center of Gravity Analysis","author":"tecuci","year":"0","journal-title":"Eighteenth National Conf of Artificial Intelligence and the Fourteenth Conf on Innovative Applications of Artificial Intelligence"},{"key":"ref19","article-title":"Personal Cognitive Assistants for Military Intelligence Analysis: Mixed-Initiative Learning, Tutoring, and Problem Solving","author":"tecuci","year":"0","journal-title":"1st International Conf Intelligence Analysis"},{"journal-title":"FireEye APT30 and the Mechanics of a Long-Running Cyber Espionage Operation report FireEye","year":"2015","key":"ref4"},{"key":"ref3","first-page":"171","article-title":"Collaborative Cognitive Assistants for Advanced Persistent Threat Detection","author":"meckl","year":"0","journal-title":"2017 AAAI Fall Symposium Series"},{"key":"ref6","doi-asserted-by":"crossref","DOI":"10.1017\/CBO9781316388488","author":"tecuci","year":"2016","journal-title":"Intelligence Analysis as Discovery of Evidence Hypotheses and Arguments Connecting the Dots"},{"year":"2013","key":"ref5"},{"year":"2018","key":"ref8"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9781316388464"},{"journal-title":"Ponemon Institute The Cost of Insecure Endpoints","year":"2017","key":"ref2"},{"journal-title":"Ten Strategies of a World-Class Cybersecurity Operations Center","year":"2014","author":"zimmerman","key":"ref1"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1093\/acprof:oso\/9780198244127.001.0001"},{"key":"ref20","article-title":"Disciple-LTA: Learning, Tutoring and Analytic Assistance","author":"tecuci","year":"2008","journal-title":"Journal of Intelligence Community Research and Development"}],"container-title":["Computing in Science &amp; Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/5992\/8625867\/08492519.pdf?arnumber=8492519","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,3]],"date-time":"2022-05-03T19:57:08Z","timestamp":1651607828000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8492519\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,11,1]]},"references-count":20,"journal-issue":{"issue":"6"},"URL":"https:\/\/doi.org\/10.1109\/mcse.2018.2873854","relation":{},"ISSN":["1521-9615","1558-366X"],"issn-type":[{"type":"print","value":"1521-9615"},{"type":"electronic","value":"1558-366X"}],"subject":[],"published":{"date-parts":[[2018,11,1]]}}}